Professional services company BDO has strengthened its risk advisory services by launching a new team in Perth, focusing on AI and cyber threats.  

According to The West Australian, the expansion includes hiring Angela Pak and Andrew Hillbeck, former partners from KPMG and Deloitte, respectively.  

The move aims to enhance BDO’s presence in Western Australia and capture new business opportunities. 

BDO’s new risk advisory services practice in Western Australia will focus on helping organisations establish robust internal governance frameworks.  

Its national strategy involves expanding beyond traditional audit and tax services into advisory, especially after the PwC tax scandal affected the reputation of professional services firms in Australia, the publication said.  

In 2024, BDO achieved a record annual revenue of more than A$500m ($325m). 

BDO’s expansion into Canberra aimed to secure more Federal Government advisory work.  

The Western Australia team anticipates similar opportunities with State Government organisations.  

Sherif Andrawes, BDO’s partner in charge of advisory in Perth, stated that the decision to launch the team was driven by increasing demand for new projects over the past two years. 

“It got to the point where clearly there was such a demand that we needed to do something in that respect . . . there was a clear gap in our offering”, he was quoted by the publication as saying.  

Andrawes noted that the starting team of eight is expected to grow quickly, emphasising the importance of local expertise for Western Australian organisations.  

The team aims to provide advisory services as organisations integrate AI, manage data, and address cyber risks. 

Pak, previously KPMG’s national lead on operational technology cyber security, highlighted the challenge of technology outpacing regulatory compliance.  

She said, “One of the risks that we’re seeing is that the technology is actually faster than the regulatory compliance and risk processes that organisations do maintain at the moment.” 

“If you have got one provider working with, say Microsoft, to implement a new system, our role will be working on the business side to make sure all the risks have been managed the guardrails are in place. 

“Are they looking at the consideration of data and cyber and workforce readiness to adopt those new technologies?” 

Hillbeck, former risk advisory partner at Deloitte, stressed the importance of strong internal governance structures.  

He commented, “Internal audit is not the most glamorous thing that is done, but it is important.”